Data Protection Analyst

HENGTONG CONSULTANT & SOLUTION INC.; Metro Manila; On-site; PHP 600,000 - 1,200,000; Full time

Benefits offered by this job

Health and wellness benefits

Competitive salary

Professional development support

Collaborative team environment

Exposure to diverse data protection/ch

Job summary

HENGTONG CONSULTANT & SOLUTION INC. is seeking a Data Protection Analyst to join in Metro Manila on a full-time basis. You will safeguard sensitive information, implement governance frameworks, and ensure regulatory compliance across the organisation and client projects.

You will manage DPIAs, privacy risk assessments, and data subject requests while collaborating with IT and database teams to maintain robust security controls. A strong background in GDPR/PDPA and privacy by design is essential.

Qualifications

• Recognised qualification in data protection, privacy law, information security, or related field; certifications such as IAPP CIPP/ CIPM valued.
• 3–5 years of professional experience in data protection, privacy compliance, or information security.
• Knowledge of GDPR and PDPA and other applicable frameworks.
• Strong understanding of data governance and information lifecycle management.
• Experience with DPIAs and risk analysis methodologies.
• Familiarity with ISO 27001/27002 and NIST guidelines.
• Ability to analyse complex data flows and systems for privacy risks.
• Excellent communication and stakeholder management skills.
• Attention to detail and organisational skills for multiple compliance initiatives.
• Experience with data protection tools and privacy by design concepts.

Responsibilities

• Develop, implement, and maintain data protection policies aligned with international regulations and best practices.
• Conduct DPIAs and risk assessments to identify vulnerabilities and mitigation strategies.
• Monitor compliance with GDPR, PDPA, and other relevant frameworks.
• Provide guidance to internal teams and clients on data protection and privacy.
• Manage data subject rights requests and ensure timely fulfilment.
• Design and deliver data protection training and awareness programs.
• Document processing activities and governance decisions.
• Collaborate with IT and DB admins to implement security controls.
• Investigate and respond to data security incidents and breaches.
• Stay updated on emerging data protection threats and regulatory changes.

Skills

Data protection

Privacy compliance

Information security

DPIA

Risk analysis

Privacy by design

ISO 27001

ISO 27002

NIST

SIEM

Encryption

GDPR

PDPA

Education

Privacy/data protection qualification

Tools

SIEM

Encryption technologies

Job description

About us

HENGTONG CONSULTANT & SOLUTION INC. is a forward-thinking technology solutions company dedicated to delivering comprehensive consulting and innovative digital solutions to organisations across multiple industries. We specialise in helping businesses navigate complex technological challenges whilst maintaining the highest standards of data security and compliance. Our commitment to excellence, integrity, and client success has established us as a trusted partner for organisations seeking reliable technology expertise and strategic guidance

About the role

We are seeking a Data Protection Analyst to join our team on a full-time basis in Metro Manila. This is a strategic position within our Database Development & Administration division, where you will play a crucial role in ensuring that our organisation and our clients maintain the highest standards of data security, privacy compliance, and regulatory adherence. As a Data Protection Analyst, you will be at the forefront of our efforts to safeguard sensitive information, implement robust data governance frameworks, and ensure compliance with evolving data protection legislation. This role is essential to protecting our corporate reputation and maintaining the trust of our clients and stakeholders

Key responsibilities

• Develop, implement, and maintain comprehensive data protection policies and procedures aligned with international data privacy regulations and industry best practices
• Conduct regular data protection impact assessments (DPIAs) and risk assessments to identify vulnerabilities and recommend mitigation strategies
• Monitor compliance with data protection regulations including GDPR, PDPA, and other relevant legislative frameworks applicable to our operations
• Provide expert advice and guidance to internal teams and clients on data protection matters, privacy concerns, and compliance requirements
• Manage and respond to data subject rights requests, ensuring timely and accurate fulfilment within regulatory timeframes
• Design and deliver data protection training and awareness programmes to staff across all levels of the organisation
• Maintain detailed records of processing activities and ensure proper documentation of data protection measures and governance decisions
• Collaborate with IT and database administration teams to implement technical and organisational security measures for data protection
• Investigate and respond to data security incidents, breaches, or compliance violations, and escalation as appropriate
• Stay informed of emerging data protection threats, regulatory changes, and technological developments to ensure continuous improvement of our security posture

What we're looking for

• Recognised qualification in data protection, privacy law, information security, or a related field; certifications such as IAPP CIPP, IMAP CIPM, or equivalent are highly valued
• Minimum of 3–5 years of professional experience in data protection, privacy compliance, or information security roles
• Comprehensive knowledge of international data protection regulations including GDPR, PDPA (Personal Data Protection Act), and other applicable frameworks
• Strong understanding of database administration, data governance frameworks, and information lifecycle management
• Proficiency in conducting data protection impact assessments and risk analysis methodologies
• Excellent knowledge of security standards and frameworks such as ISO 27001, ISO 27002, and NIST cybersecurity guidelines
• Demonstrated ability to analyse complex data flows, systems architecture, and identify potential privacy risks
• Strong communication and interpersonal skills, with the ability to explain technical concepts to non-technical stakeholders
• Exceptional attention to detail and organisational abilities to manage multiple compliance initiatives simultaneously
• Experience with data protection tools, encryption technologies, and security information and event management (SIEM) systems is advantageous
• Knowledge of privacy by design principles and their practical application in system development

What we offer

• Competitive salary package commensurate with experience and qualifications
• Opportunities for continuous professional development, including support for relevant certifications and training programmes
• A collaborative working environment where your expertise is valued and your contributions directly impact our strategic direction
• Exposure to diverse industry sectors and complex data protection challenges that will enhance your professional expertise
• Access to the latest data protection and security technologies and tools
• A supportive team culture that encourages innovation, learning, and career progression

• Health and wellness benefits to support your physical and mental wellbeing